Robert Haas <robertmhaas@gmail.com> writes:
> I don't understand how synchronous replication with
> allow_standalone_primary=on gives you ANY extra nines. AFAICS, the
> only point of having synchronous replication is that you wait to
> acknowledge the commit to the client until the commit record has been
> replicated. Doing that only when the standby happens to be connected
> doesn't seem like it helps much.
Because you're still thinking in terms of data availability, rather than
in terms of service availability. With the later in mind, what you want
is to be able to continue servicing from the standby should the primary
crash, and you want a good guarantee about the standby's data.
Of course in such a situation you will have some monitoring to ensure
that the standby remains in sync, and you want to know that at failover
time. But a standby failure, when you want service availability, should
never bring the service down. It's what happens, though, if you've been
setting up *data* availability, because there there's no choice.
Regards,
--
Dimitri Fontaine
http://2ndQuadrant.fr PostgreSQL : Expertise, Formation et Support